]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
lib-sasl: dsasl-client-mech-gssapi - Fix memory leak in mech_gssapi_gs1_unwrap()...
authorStephan Bosch <stephan.bosch@open-xchange.com>
Mon, 13 Oct 2025 09:51:33 +0000 (11:51 +0200)
committertimo.sirainen <timo.sirainen@open-xchange.com>
Mon, 13 Oct 2025 11:04:07 +0000 (11:04 +0000)
Reported by Coverity.

src/lib-sasl/dsasl-client-mech-gssapi.c

index 9a6a646b159af77f4cc425179f2eda49afde3391..89be9ab76aab6ccca64c905a2dfa38c1d49890b7 100644 (file)
@@ -232,6 +232,7 @@ mech_gssapi_gs1_unwrap(struct gssapi_sasl_client *gclient,
 
        if (out_buf.length != 4) {
                *error_r = "Bad server message: Invalid security data";
+               (void)gss_release_buffer(&minor_status, &out_buf);
                return DSASL_CLIENT_RESULT_ERR_PROTOCOL;
        }